Bug 1399339

Summary: Keystone identity service integration guide should refer to keystone VIP
Product: Red Hat OpenStack Reporter: nalmond
Component: documentationAssignee: Martin Lopes <mlopes>
Status: CLOSED CURRENTRELEASE QA Contact: RHOS Documentation Team <rhos-docs>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 9.0 (Mitaka)CC: mlopes, srevivo
Target Milestone: ---Keywords: Documentation
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-06-12 05:56:45 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description nalmond 2016-11-28 19:21:17 UTC 
Description of problem:
The documentation to integrate keystone with AD, IDM, and generic ldap currently has the user configure the auth_uri and url to point to the controller. However, this can be misleading in deployments with more than one controller. This should use the keystone endpoint VIP instead of the controller IP for multi-controller environments.

[keystone_authtoken]
auth_uri = http://controllerIP:5000/v3
auth_version = v3

https://access.redhat.com/documentation/en/red-hat-openstack-platform/9/single/integrate-with-identity-service/#configure_block_storage_to_use_keystone_v3_2

This also applies to the guide for RHOSP 7 and 8.
Comment 2 Martin Lopes 2017-06-12 05:42:10 UTC 
Backporting to earlier guides.
Comment 3 Martin Lopes 2017-06-12 05:53:09 UTC 
Backported to osp10/9/8/7 guides.
Comment 4 Martin Lopes 2017-06-12 05:54:39 UTC 
Thanks for raising this bug. All guides have been republished to include the note.

For example: 
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/9/html-single/integrate_with_identity_service/#configure_block_storage_to_use_keystone_v3_2